The HSA Safety Statement: what every Irish business needs (2026 guide)

If you employ anyone in Ireland, you are almost certainly required by law to have a written Safety Statement. It is one of the most fundamental duties under the Safety, Health and Welfare at Work Act 2005, and it is also one of the most commonly out-of-date documents the Health and Safety Authority (HSA) finds when it visits a workplace. Yet for something so central, it is widely misunderstood — treated either as a box-ticking formality or as an impenetrable legal document that only a consultant can produce. It is neither. This guide explains, in plain terms, what a Safety Statement actually is, the law behind it, exactly what it must contain, how to write one that reflects your real business, and how to keep it alive so that it never becomes the stale document an inspector pulls apart.

What a Safety Statement actually is

A Safety Statement is your written programme for securing the safety, health and welfare of people at your workplace. It is the document that says, in effect: here are the hazards in our business, here is how serious the risks are, here is exactly what we do to control them, and here is who is responsible for making that happen. It is the public, written expression of your risk management — proof that you have looked at your own workplace, thought about what could hurt someone, and put measures in place.

The single most important word in that description is "your". The HSA is repeatedly clear that a Safety Statement must be specific to your workplace, your activities and your people. A generic template downloaded from the internet with your company name typed into the front page is not a Safety Statement; it is a document pretending to be one, and an inspector will see through it in minutes. That does not mean you cannot start from a template — you can — but the substance has to describe the business you actually run.

The law behind it

The duty comes from the Safety, Health and Welfare at Work Act 2005, the cornerstone of Irish occupational safety law. Two sections matter most. Section 19 requires every employer to identify the hazards in the workplace, assess the risks arising from them, and record that assessment — this is your risk assessment duty. Section 20 requires the employer to prepare a written Safety Statement, based on those risk assessments, specifying the manner in which safety, health and welfare will be secured and managed. In other words, the risk assessments feed the Safety Statement; you cannot properly write one without the other.

Beyond those two sections, the Act imposes a general duty on employers to ensure, so far as is reasonably practicable, the safety, health and welfare of their employees, and a duty not to endanger others affected by the work, such as members of the public, customers or contractors. The Safety Statement is how you demonstrate you are meeting those duties in a planned, documented way rather than by good luck.

Who needs one

In practice, effectively every employer in Ireland needs a Safety Statement. If you employ people — one person or one hundred — the duty applies. There is a limited concession for very small employers: businesses with three or fewer employees may, in certain sectors, rely on an HSA-published Code of Practice instead of preparing a full bespoke statement, provided they follow it and it fits their work. But the underlying obligations to identify hazards, assess risks and manage them do not disappear even then, and for most businesses a proper Safety Statement is expected. The self-employed also have duties under the Act to ensure they do not put themselves or others at risk.

What a Safety Statement must contain

A Safety Statement is not a fixed template, but the HSA expects it to cover a recognisable set of things. At a minimum it should include the following.

Hazard identification and risk assessment. The heart of the document. For each significant hazard in your workplace — slips and trips, manual handling, machinery, hazardous substances, working at height, fire, workplace transport, work-related stress and so on — you record what the hazard is, who might be harmed and how, how likely harm is, how serious it could be, and what you already do to control it. Where the existing controls are not enough, you record the further actions needed and who will do them by when.

The control measures and safe systems of work. The specific, practical measures you use to reduce each risk — guards on machines, ventilation, training, personal protective equipment, permits to work, maintenance schedules, and the procedures people follow to do hazardous tasks safely.

Named responsibilities. The Safety Statement must name the people responsible for safety and health matters and set out the resources available for securing safety. Naming a real person, by role, matters: "the site manager is responsible for daily plant checks" is meaningful; "management will ensure safety" is not.

Arrangements for consultation and the names of safety representatives. Employees have a right under the Act to be consulted on safety matters and may select a safety representative. The Statement should describe how consultation happens and record who the safety representative is, if one has been selected.

Emergency plans and procedures. How you deal with fire, evacuation, serious and imminent danger, and other emergencies — including who is responsible, how people are alerted, and where they assemble.

First aid and welfare arrangements. Your provision for first aid — trained first-aiders, equipment and its location — and the welfare facilities you provide.

Reporting and recording. How accidents, incidents and dangerous occurrences are reported and recorded, including the duty to report certain accidents and dangerous occurrences to the HSA.

Cooperation and information. How you inform employees of risks and the protective measures, and how you cooperate with others — for example other employers sharing a workplace, or contractors.

How to actually write one, step by step

The prospect of writing a Safety Statement stalls many small businesses, so it helps to break it into steps. First, walk your workplace and list the hazards honestly — do not start from a template's list, start from what you can actually see and what your people tell you. Second, for each hazard, assess the risk: think about who is exposed, how likely harm is and how bad it could be, and what you already do about it. Third, decide what more is needed, applying the hierarchy of controls — can you eliminate the hazard, substitute something safer, engineer a control, put a safe procedure in place, and only then rely on personal protective equipment as the last line. Fourth, write it up in plain language, name the people responsible, and set out your emergency, first aid and reporting arrangements. Fifth, bring it to your employees' attention and consult them — a Safety Statement written in secret and filed away fails a basic legal test. Finally, set a date to review it.

The risk assessment method at the centre

Because risk assessment is the engine of the Safety Statement, it is worth being clear about the method. For each hazard you weigh two things: the likelihood that harm occurs, and the severity of that harm if it does. A high-likelihood, high-severity hazard demands strong, immediate controls; a low-likelihood, low-severity one may need little. The goal is not to eliminate every conceivable risk — the law asks for what is reasonably practicable — but to show you have thought it through and put proportionate controls in place. Crucially, you assess the residual risk once your controls are in place, and if that is still too high, you add more.

Consultation and safety representatives

A recurring blind spot is consultation. The Act gives employees the right to be consulted on matters affecting their safety and health, and the right to select a safety representative to represent them to the employer. This is not optional goodwill; it is a legal expectation, and the Safety Statement should describe how it works in your business and name the representative if one exists. Consultation is also simply good practice — the people doing the work usually know the real hazards better than anyone, and involving them makes the whole system stronger.

Bringing it to employees' attention

A Safety Statement that sits in a drawer has not met its purpose. The Act requires that it be brought to the attention of employees — at induction, at least annually, and whenever it is revised — and to other people at the workplace who might be affected, in a form and language they understand. If you employ people whose first language is not English, the relevant parts must be communicated in a way they can actually follow. Being able to show that staff have seen and understood it is part of demonstrating compliance.

Reviewing and updating — the mistake that catches everyone

The single biggest problem the HSA sees is not the absence of a Safety Statement — it is one that is years out of date. The law requires it to be reviewed and updated when there is a significant change: new equipment, a new process or material, a change in the workplace or the way work is organised, after an accident or near miss, or when there is reason to believe it is no longer valid. Even without a specific change, it should be reviewed periodically. A Safety Statement that describes a business you no longer run — machines you have replaced, people who have left, processes you have changed — is worse than useless, because it is evidence that the risk assessment was a one-off event rather than a living process, which is exactly the opposite of what the Act intends.

What the HSA does on inspection

HSA inspectors have wide powers. On a visit they can ask to see your Safety Statement and your risk assessments, inspect the workplace, and interview staff. If they find shortcomings they have a range of enforcement tools. They can give verbal advice, or issue a written Report of Inspection. Where a contravention needs fixing they can serve an Improvement Notice requiring specified action within a set time. Where there is a risk of serious personal injury they can serve a Prohibition Notice, which stops the activity immediately until the danger is dealt with. In serious cases the HSA can prosecute, and the Act provides for significant fines on summary conviction and, on conviction on indictment, substantial fines and potential imprisonment. The point is not to frighten — it is that the Safety Statement and risk assessments are usually the first things an inspector asks for, and a good one sets the tone for the whole visit.

The failings that come up again and again

Certain problems recur. A generic template that does not match the business. Risk assessments that list hazards but no real controls. No named responsibilities. No evidence of consultation. A document that has not been reviewed in years. Missing arrangements for emergencies or first aid. And, very commonly, a Safety Statement that exists but which no employee has ever seen. Each of these is avoidable, and each is exactly what an inspection surfaces.

A note on different sectors

The principles are the same everywhere, but the content differs. A construction firm's Safety Statement will lean heavily on working at height, plant, and site-specific risk, alongside Safe Pass and CSCS records. A care setting will weigh manual handling, infection control, lone working and challenging behaviour. A shop or salon will focus on slips, manual handling, chemicals and workplace violence. Retail, hospitality, manufacturing and agriculture each carry their own dominant hazards. The HSA publishes sector guidance and BeSMART risk assessment tools to help, and the right Safety Statement always reflects the real work of the specific business.

Keeping it current without the annual panic

The businesses that stay compliant are the ones that treat the Safety Statement as a live record rather than a document written once a year in a rush. That means keeping your risk assessments, training records, certificates, consultation notes and incident logs in one place, and reviewing them on a schedule rather than the night before an inspector arrives. When a new machine comes in or a process changes, the assessment is updated then and there, not at some distant annual review. This is exactly what Complys is built to do for Irish businesses: it builds your Safety Statement and risk assessments, keeps every certificate and training renewal tracked with reminders, records your reviews, and gives you a live readiness score against what the HSA expects — so "is our Safety Statement up to date?" becomes a question you can answer with confidence in seconds rather than a scramble you dread.

The bottom line

A Safety Statement is not paperwork for its own sake. Done properly it is a genuinely useful map of how your business keeps people safe — and done poorly, or left to rot, it is the clearest possible signal to an inspector that safety is not being managed. It is a legal requirement under the 2005 Act, it must be specific to your workplace, it must be based on real risk assessments, it must name responsibilities, it must be shared with your people, and it must be kept current. Get those things right and an HSA visit becomes a conversation about a well-run business rather than a list of failings.